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FIG. 1 
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SENDER OBTAINS IBE PUBLIC KEY OF 
RECIPIENT AND IBE PUBLIC 
PARAMETER INFORMATION 



SENDER ENCRYPTS MESSAGE FOR 
RECIPIENT USING IBE ENCRYPTION 
ALGORITHM 



SENDER SENDS MESSAGE TO 
RECIPIENT AND RECIPIENT RECEIVES 
MESSAGE 



RECIPIENT OBTAINS RECIPIENT'S IBE 
PRIVATE KEY FROM IBE PRIVATE KEY 
GENERATOR 



RECIPIENT DECRYPTS ENCRYPTED 
MESSAGE USING RECIPIENT'S IBE 
PRIVATE KEY AND IBE DECRYPTION 
ALGORITHM 
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FIG. 2 



> 



SENDER ENCRYPTS MESSAGE USING QG (E.G., 
SENDER GENERATES M QG ) 
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SENDER ENCRYPTS ENCRYPTED MESSAGE DATA 
AND PUBLIC KEY QG USING LESS SENSITIVE PUBLIC 
KEY QL (E.G., SENDER GENERATES [M QG , QG] QL ) 



SENDER SENDS TWO-LAYER-ENCRYPTED MESSAGE 
WITH LESS-SENSITIVE PUBLIC KEY QL TO RECIPIENT 
(E.G., SENDER SENDS ([M QG , QG] QM , QL) TO 
RECIPIENT) 
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RECIPIENT QUERIES PRIVATE KEY GENERATOR FOR 
PRIVATE KEY CORRESPONDING TO QL 
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RECIPIENT DECRYPTS OUTER LAYER USING PRIVATE 
KEY FOR QL TO PRODUCE M QG , QG 
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RECIPIENT QUERIES PRIVATE KEY GENERATOR FOR 
PRIVATE KEY CORRESPONDING TO QG 
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RECIPIENT DECRYPTS INNER LAYER (M QG ) USING 
PRIVATE KEY FOR QG TO PRODUCE UNENCRYPTED 
VERSION OF MESSAGE M 
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FIG. 3 



SENDER ENCRYPTS MESSAGE IN MULTIPLE LAYERS 
USING (SYMMETRIC) MESSAGE KEYS AND IBE 
PUBLIC KEYS OF VARYING SENSITIVITY 



SENDER SENDS MULTI-LAYER ENCRYPTED 
MESSAGE TO RECIPIENT 
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RECIPIENT USES IBE PUBLIC KEYS TO QUERY 
PRIVATE KEY GENERATOR FOR PRIVATE KEYS AND 
USES PRIVATE KEYS AND DECRYPTED MESSAGE 
KEYS TO DECRYPT SUCCESSIVE LAYERS 
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FIG. 4 



DATA STRUCTURE 



<MOVIE> 

<SUBSCRIBER_NO NO=24286671/> 
< RATING NC-17>\ 
<TITLE "MOVIE NAM E7> 
<REGION R="US7> 
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</MOVIE> 
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<IBE_POLICY_ATTRIBUTE_RECORD> 
<TYPE T = "MOVIE'7> 

<FIELD F="SUBSCRIBER NO."; POLICY = 'VIEWER SUBSCRIBER NO. MUST MATCH"; 

SENSITIVITY = "N0NE7> 
<FIELD F = "RATING"; POLICY = "MUST BE OLD ENOUGH TO VIEW RATING"; 

SENSITIVITY = "HIGH7> 

</IBE POLICY ATTRIBUTE RECORD> 
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OBTAIN DATA TO BE ENCRYPTED AND 
ASSOCIATED ATTRIBUTES WHICH MAY BE USED 
IN FORMING IBE PUBLIC KEY FOR ENCRYPTION 
(E.G., OBTAIN AN XML DATA STRUCTURE 
CONTAINING DATA SUCH AS A MOVIE AND 
ASSOCIATED ATTRIBUTES SUCH AS RATING 
AND SUBSCRIBER NUMBER) 



OBTAIN ATTRIBUTE CHARACTERISTICS TO BE 
USED IN DETERMINING HOW EACH ATTRIBUTE 
SHOULD BE USED DURING THE PROCESS OF 
ENCRYPTING THE DATA (E.G., OBTAIN AN XML 

RECORD THAT CONTAINS ATTRIBUTE 
SENSITIVITY LEVEL INFORMATION SPECIFYING 

HOW SENSITIVE EACH ATTRIBUTE IS) 



ENCRYPT DATA USING IBE PUBLIC KEY THAT IS 

BASED ON ATTRIBUTES AND THEIR 
CHARACTERISTICS (E.G., USE MORE SENSITIVE 
ATTRIBUTES IN INNER IBE ENCRYPTION LAYERS 
AND LESS SENSITIVE ATTRIBUTES IN OUTER 
IBE ENCRYPTION LAYERS) 



FIG. 7 



